AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert

8 hours ago 9

security

Have I Been Pwned confirms scale for first time 

A data breach at AI music generator platform Suno exposed more than 55 million user accounts, according to Troy Hunt's Have I Been Pwned service, which ingested the files.

The dump consisted mostly of email addresses, although phone numbers were also included where users had signed up with them instead, HIBP said.

Tens of thousands of Stripe records further revealed data such as names, physical addresses, purchase amounts, as well as partial credit card data, such as card type, expiry date, and the last four digits of the card number.

The breakdown from Have I Been Pwned puts a figure on the scale of Suno's data breach for the first time since the news of the slip-up broke last week.

The individual who claimed responsibility for breaching Suno also supplied source code apparently dating from 2023 and 2024 that they said showed the company scraping millions of songs and lyrics from services including YouTube Music, Deezer, and Genius to train its AI.

Suno has acknowledged training its AI on music available on the open internet, while arguing that doing so constitutes fair use.

It did not immediately respond to The Register's request for comment.

AI's imposition on the arts has been a persistent topic of ethical and moral debate for years.

Major record labels came together to complain about mass data scraping and copyright infringement by AI companies prior to Suno's breach in November 2025.

Record labels represented by the Recording Industry Association of America (RIAA) sued Suno and rival Udio in 2024 for allegedly scraping songs en masse without permission of the copyright holders.

Among the plaintiffs in the case were Sony Music Entertainment, UMG Recordings, and Warner Records, which represent artists such as Bruce Springsteen, Beyoncé, Taylor Swift, and Dua Lipa.

Warner has since settled its litigation with Suno and begun a commercial partnership with the AI company, while Sony and UMG are continuing their claims in court. ®

Read Entire Article